Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: YzpNgmgXm91yLKFVCJibZv0kEcI+XFETZv5JzQ8sXCc=
Subject key identifier: 3F:FE:A8:D6:A8:F7:7A:A4:54:53:B9:52:0F:60:E8:79:4C:04:7D:4B
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019DA30A7BA946DFA47A80B7C549F1D94BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 00:01:06 +0000
Manifest this update: Sun 19 Apr 2026 00:01:06 +0000
Manifest next update: Mon 20 Apr 2026 00:01:06 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: lIz09Rkh898OwdRYJUyZ4L/RFyZF5srr572YtUDZ2bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:7b:a9:46:df:a4:7a:80:b7:c5:49:f1:d9:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Apr 19 00:01:06 2026 GMT
Not After : Apr 20 00:01:06 2026 GMT
Subject: CN=3ffea8d6a8f77aa45453b9520f60e8794c047d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:48:0c:f4:a6:04:66:f5:ca:51:bb:db:57:
34:42:87:08:62:a3:97:31:4e:08:55:ad:c3:25:97:
8d:fd:61:6e:73:c4:c8:5f:2e:da:0e:5e:5f:67:2b:
ab:cb:ea:94:e6:c5:93:0c:1a:09:69:3d:44:55:7e:
00:d0:8c:82:04:14:bf:22:25:61:47:46:f2:f2:c7:
f5:f7:e3:a9:73:2f:c4:8d:12:a8:cb:91:85:5d:19:
e0:23:f7:a0:43:01:68:62:84:44:1b:52:8c:04:45:
f6:e3:fc:c2:10:66:6a:c8:3c:b8:0d:ea:a8:03:d0:
47:ea:7f:4e:7c:bd:da:be:0e:66:52:e6:11:ea:41:
04:29:ca:4b:8c:77:7f:09:9f:3b:2e:a4:ee:57:4a:
54:ea:73:cf:65:2d:2f:4c:d0:5b:87:53:d5:ae:69:
13:90:ab:be:e8:6b:b3:cc:5b:b3:96:e3:86:dd:0a:
62:5c:69:05:b2:15:bf:be:4d:72:a6:23:d2:54:4d:
62:a3:a5:8a:04:0b:33:95:92:35:8a:00:e8:e5:ee:
c9:88:de:d9:5d:c5:d7:b3:78:38:59:02:9d:d8:17:
1c:16:2e:2b:fc:e8:1b:30:1a:07:c0:2b:e6:4d:63:
70:e9:d1:06:d0:14:39:68:bd:fd:02:8a:a7:7c:9b:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:A8:D6:A8:F7:7A:A4:54:53:B9:52:0F:60:E8:79:4C:04:7D:4B
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:9f:94:f3:7d:65:30:67:55:53:ce:1a:56:86:4e:58:d9:
16:b9:c7:1e:18:f4:85:77:d2:06:45:92:85:42:b4:1e:2a:68:
98:20:84:88:c9:70:24:c0:e1:df:50:c5:4a:89:9f:51:1a:24:
8a:a4:c7:30:c4:e9:49:08:41:84:8c:05:24:88:ac:a8:78:f7:
8d:16:88:98:0f:ad:0a:f7:74:9c:46:ad:bd:b8:d6:b2:df:81:
5b:47:95:e2:77:c0:2f:e0:d8:f7:a7:0f:a2:8b:89:9e:2d:42:
af:35:20:c6:41:36:17:b2:a4:21:41:23:ea:7f:be:d9:52:25:
4b:fe:75:5c:f5:76:3e:f0:f0:c6:6c:db:46:f1:f2:ae:3d:98:
e8:ee:45:5d:37:9e:85:1e:ea:11:86:7e:4c:c4:5e:28:05:10:
69:27:79:d6:71:4a:75:6d:aa:bd:37:84:95:fc:77:0c:b1:7c:
69:bf:de:4c:0b:fa:35:54:2d:3d:0e:d6:d8:a0:95:eb:e5:4d:
71:1f:32:a2:8d:aa:ff:49:ec:21:53:7d:f7:3a:81:33:ea:86:
88:89:70:6a:92:d8:c7:58:ab:a7:f2:c9:7f:48:f4:ce:35:fe:
92:43:03:bf:a4:a3:48:7a:ad:08:78:38:62:a3:dd:df:d2:bf:
d9:52:1d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:53 2026 by rpki-client